Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,505cataloged exploits

40,256CVEs with public exploitation

24,696lab-tested

All Referência 26,094Exploit-DB 24,488GitHub PoC 17,829VulnCheck XDB 10,015Nuclei 4,547Metasploit 3,532✓ verified onlyrecent popular risk

5,629 exploits

Referência✓ VexDay Proof

phpBP RC3 (2.204) - SQL Injection / Remote Code Execution

CVE-2007-0369—webappsphp

SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to execute arbitrary SQL commands v

23RISK

open ↗

Referência✓ VexDay Proof

BrowseDialog Class 'ccrpbds6.dll' Internet Explorer 7 - Denial of Service

CVE-2007-0371—doswindows

A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allo

23RISK

open ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 3.0.0 - SQL Injection

CVE-2007-4312—webappsphp

SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência✓ VexDay Proof

PHP blue dragon CMS 3.0.0 - Remote File Inclusion

CVE-2007-4313—webappsphp

PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 all

35RISK

open ↗

Referência✓ VexDay Proof

Surgemail 38k - 'Search' Remote Buffer Overflow

CVE-2007-4377—remotewindows

Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

Epistemon 1.0 - 'common.php?inc_path' Remote File Inclusion

CVE-2007-0701—webappsphp

PHP remote file inclusion vulnerability in inc/common.inc.php in Epistemon 1.0 allows remote attackers to execute arbitr

23RISK

open ↗

Referência✓ VexDay Proof

Somery 0.4.6 - 'skin_dir' Remote File Inclusion

CVE-2007-0704—webappsphp

PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP

23RISK

open ↗

Referência✓ VexDay Proof

DL PayCart 1.01 - 'viewitem.php?ItemID' Blind SQL Injection

CVE-2007-4604—webappsphp

SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands

23RISK

open ↗

Referência✓ VexDay Proof

PHPNuke-Clan 4.2.0 - 'mvcw_conver.php' Remote File Inclusion

CVE-2007-4606—webappsphp

PHP remote file inclusion vulnerability in convert/mvcw_conver.php in the Virtual War (VWar) module for PHPNuke-Clan (PN

23RISK

open ↗

Referência✓ VexDay Proof

OPENi-CMS Site Protection Plugin - Remote File Inclusion

CVE-2007-0881—webappsphp

PHP remote file inclusion vulnerability in the Seitenschutz plugin for OPENi-CMS 1.0 allows remote attackers to execute

23RISK

open ↗

Referência✓ VexDay Proof

DoceboLms 2.0.5 - 'help.php' Remote File Inclusion

CVE-2006-2668—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP co

23RISK

open ↗

Referência✓ VexDay Proof

Ottoman CMS 1.1.3 - '?default_path=' Remote File Inclusion (1)

CVE-2006-2767—webappsphp

PHP remote file inclusion vulnerability in Ottoman 1.1.2, when register_globals is enabled, allows remote attackers to e

23RISK

open ↗

Referência✓ VexDay Proof

phpCommunityCalendar 4.0.3 - Cross-Site Scripting / SQL Injection

CVE-2006-2798—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to inject arbit

23RISK

open ↗

Referência✓ VexDay Proof

News Bin Pro 5.33 - '.nbi' Local Buffer Overflow

CVE-2007-1074—localwindows

Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to execute arbitr

23RISK

open ↗

Referência✓ VexDay Proof

TurboFTP Server 5.30 Build 572 - 'newline/LIST' Multiple Remote Denial of Service Vulnerabilities

CVE-2007-1075—doswindows

TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large

23RISK

open ↗

Referência✓ VexDay Proof

LimeSurvey 4.1.11 - 'File Manager' Path Traversal

CVE-2020-11455—webappsphp

LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileM

60RISK

open ↗

Referência✓ VexDay Proof

PHP-Nuke Module splattforum 4.0 RC1 - Local File Inclusion

CVE-2007-1633—webappsphp

Directory traversal vulnerability in bbcode_ref.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allo

23RISK

open ↗

Referência✓ VexDay Proof

Foxit Reader 9.7.1 - Remote Command Execution (Javascript API)

CVE-2020-14425—localwindows

Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can exe

35RISK

open ↗

Referência✓ VexDay Proof

phpRealty 0.02 - 'MGR' Multiple Remote File Inclusions

CVE-2007-4834—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP cod

35RISK

open ↗

Referência✓ VexDay Proof

ClassWeb 2.0.3 - 'BASE' Remote File Inclusion

CVE-2007-1640—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitr

23RISK

open ↗

Referência✓ VexDay Proof

X-Cart - Multiple Remote File Inclusions

CVE-2007-4907—webappsphp

Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component Template Be2004-2 - 'index.php' Remote File Inclusion

CVE-2007-2143—webappsphp

PHP remote file inclusion vulnerability in index.php in the Be2004-2 template for Joomla! allows remote attackers to exe

23RISK

open ↗

Referência✓ VexDay Proof

Joomla! Component JoomlaPack 1.0.4a2 RE - 'CAltInstaller.php' Remote File Inclusion

CVE-2007-2144—webappsphp

PHP remote file inclusion vulnerability in includes/CAltInstaller.php in the JoomlaPack (com_jpack) 1.0.4a2 RE component

23RISK

open ↗

Referência✓ VexDay Proof

JBlog 1.0 - 'index.php?id' SQL Injection

CVE-2007-4919—webappsphp

Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute arbitrary SQL commands via the

23RISK

open ↗

Referência✓ VexDay Proof

PHP Webquest 2.5 - 'id_actividad' SQL Injection

CVE-2007-4920—webappsphp

SQL injection vulnerability in soporte_derecha_w.php in PHP Webquest 2.5 and earlier allows remote attackers to execute

23RISK

open ↗

Referência✓ VexDay Proof

WebSPELL 4.01.02 - 'picture.php' File Disclosure

CVE-2007-2369—webappsphp

Directory traversal vulnerability in picture.php in WebSPELL 4.01.02 and earlier, when PHP before 4.3.0 is used, allows

23RISK

open ↗

Referência✓ VexDay Proof

Xforum 1.4 - 'topic' SQL Injection

CVE-2008-0279—webappsphp

SQL injection vulnerability in liretopic.php in Xforum 1.4 and possibly others allows remote attackers to execute arbitr

23RISK

open ↗

Referência✓ VexDay Proof

DomPHP 0.81 - Remote Add Administrator

CVE-2008-0282—webappsphp

SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arb

23RISK

open ↗

Referência✓ VexDay Proof

Foojan Wms 1.0 - 'story' SQL Injection

CVE-2008-0447—webappsphp

SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL c

23RISK

open ↗

Referência✓ VexDay Proof

Easysitenetwork Recipe - 'categoryId' SQL Injection

CVE-2008-0453—webappsphp

SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL comma

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.